Approval-gated local action runtime for Apple workspaces, with profile-based modules, progressive MCP tool exposure, audit logs, HITL approval, and Mac app automation.